User guide

SmartDefense Categories
212 Check Point ZoneAlarm User Guide
Packet Sanity
Packet Sanity performs several Layer 3 and Layer 4 sanity checks. These include verifying
packet size, UDP and TCP header lengths, dropping IP options, and verifying the TCP
flags.
You can configure whether logs should be issued for offending packets.
Table 43: Packet Sanity Fields
In this field… Do this…
Action Specify what action to take when a packet fails a sanity test, by selecting
one of the following:
• Block. Block the packet. This is the default.
• None. No action.
Track Specify whether to issue logs for packets that fail the packet sanity tests, by
selecting one of the following:
• Log. Issue logs. This is the default.
• None. Do not issue logs.